Skip to main content

Cilium

 


  • Cilium operates at L3/L4 to provide trasitional networking and security services
  • It also works at L7 to provide application level servies like gRPC, HTTP, Kafka
  • Cilium inserts itself in the kernel at
    • Network IO
    • Application Sockets and Tracepoints to implement security and visibility.
  • Intelligent Routing
    • Cilium can do more intelligent routing other than opening or blocking a port
      • Allow all HTTP requests with method GET and path /public/.*. Deny all other requests.
      • Allow service1 to produce on Kafka topic topic1 and service2 to consume on topic1. Reject all other Kafka messages.
      • Require the HTTP header X-Token: [0-9]+ to be present in all REST calls.
      • More examples of policies at https://docs.cilium.io/en/stable/policy/#layer-7
  • Service to Service Communication

Comments

Popular posts from this blog

It was a great experience to talk to a huge audience in Mumbai and Delhi about how to start your ML journey at Google Cloud Summit ’18 India

Sunset

Sunset

COVID-19 Lockdown

It is May 11th 2020 and most of India has been under lockdown for 46 straight days. These have been tough times for everyone. While some of the folks i know have been cribbing about being bored to death in this lockdown, for me it has been a busy time. My current field of work which is "Cloud Technology" picked up as everyone was locked up with nothing but technology to entertain and survive and hence there was a lot of work. While me and my family was trying to navigate the chaos and madness of ordering everything online, i would say we were able to deal with the situation without going out much.  This was until my phone broke, crashed, bricked, it was gone.  While i had a spare 4 year old iPhone to fall back on but you know about spare phones, they were too old to trade for a newer one is why you decided to label it as a spare and keep it. They almost never work. So after struggling to get my office and personal stuff to work on an old phone and tablet, i decided i needed t